From Fedora Project Wiki

< Features
Revision as of 10:25, 6 March 2013 by Kengert (talk | contribs) (Created page with "Done items: * prepare NSS for alternatives links (Bug 915818) * ship p11-kit with trust module TODO * ship new ca-certificates ** must conflict with older p11-kit (new ca-ce...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Done items:

  • prepare NSS for alternatives links (Bug 915818)
  • ship p11-kit with trust module


TODO

  • ship new ca-certificates
    • must conflict with older p11-kit (new ca-cert needs new p11-kit)

Facts:

  • system-manage scripts cannot be in p11-kit, because of multilib.
  • system-manage scripts will be in ca-certificates.NOARCH


Tasks for ca-certificates package:

  • requires p11-kit
  • use alternatives for symbolic links? NO
  • it writes to a filename in /usr/share/ - only the trust bundle, not the old bundle
  • installs symlinks to generated files
  • makes backups of old bundles in .rpmsave backup files (in %pre script)
  • calls "p11-kit extract" at install time (in %post script) to create sub-bundle at install time
  • must have re-generate command/script in ca-certificates before feature freeze
Retrieved from "https://fedoraproject.org/w/index.php?title=Features/SharedSystemCertificates:SubTasks&oldid=325298"